CVE-2019-14370

Exiv2 0.27.99.0 contains an out-of-bounds read in MrwImage::readMetadata() (CVE-2019-14370) that could lead to denial of service. Connected sources confirm the issue but do not specify a fixed version in the provided materials; remediation/version details are not disclosed here. Monitor for updat...

PT-2019-20116

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata function, located in the rafimage.cpp file. Recommendations For Exiv2 version 0.27.99.0, consider avoiding the use of the...

PT-2019-20118

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is related to an out-of-bounds read in the readMetadata function, which could result in denial of service. Recommendations For Exiv2 version 0.27.99.0, consider applying a patch or fix to the...

CVE-2019-14369

CVE-2019-14369 : Exiv2 0.27.99.0’s PngImage::readMetadata() (pngimage.cpp) allows a crafted PNG image to trigger a heap-based buffer over-read, leading to a denial of service. Public documents corroborate this impact and indicate fixes in Exiv2 release 0.27.4 (and related patches in downstream di...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14370: Out-of-bounds Read

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

CVE-2019-14370

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

CVE-2019-14369: Out-of-bounds Read

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14368: Out-of-bounds Read

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

PT-2019-13647

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata function, located in the rafimage.cpp file. Recommendations For Exiv2 version 0.27.99.0, at the moment, there is no information...

CVE-2019-14370

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14370

In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp. It could result in denial of service...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-1784)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and applicatio...

Debian DLA-1855-1 : exiv2 security update

It was discovered that there was an integer overflow vulnerability in exiv2, a tool to manipulate images containing eg. EXIF metadata. This could have resulted in a denial of service via a specially- crafted file. For Debian 8 'Jessie', this issue has been fixed in exiv2 version 0.24-4.1+deb8u4. ...

Debian: Security Advisory (DLA-1855-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1855-1] exiv2 security update

Package : exiv2 Version : 0.24-4.1+deb8u4 CVE ID : CVE-2019-13504 It was discovered that there was an integer overflow vulnerability in exiv2, a tool to manipulate images containing eg. EXIF metadata. This could have resulted in a denial of service via a specially- crafted file. For Debian 8...

DLA-1855-1 exiv2 - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-4056-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...